Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File:                     hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier:          GON6LILiWxDcX16jdinZMqqAyd2DPZVE3gaz7BLYcUU=
Subject key identifier:   C4:03:EF:8E:34:EA:9D:79:FE:FF:B9:F9:81:35:15:1C:72:9F:76:75
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer:       /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial:       019FACACB6686865702680B79D510D0BB4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number:          1597
Signing time:             Wed 29 Jul 2026 07:00:27 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:27 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:27 +0000
Files and hashes:         1: HTwlYLS_ffwhQcdIe5ndzskreto.roa (hash: 2KCaWvsbTh5/gdngs8HmHbk57EMiFOhMngXsbQP11o0=)
                          2: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (hash: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE=)
                          3: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: IBMHcyv7CNUYP6ItwMGveRNRMFeWkipNTVpb0kKLmXQ=)
                          4: xSQW2sggbgbxw6ad1ltpXUi4AL0.roa (hash: TfP2oPkLUpfY+mHh6+HX4amHLmgM458P4qEzEj5WmsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:b6:68:68:65:70:26:80:b7:9d:51:0d:0b:b4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
        Validity
            Not Before: Jul 29 07:00:27 2026 GMT
            Not After : Jul 30 07:00:27 2026 GMT
        Subject: CN=c403ef8e34ea9d79feffb9f98135151c729f7675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:37:28:e4:35:4c:68:98:7e:bc:8a:0f:fc:
                    af:1c:a3:a1:90:14:4e:a9:26:8c:31:e5:1d:f8:86:
                    0a:4d:75:42:a9:50:a5:22:a2:14:41:70:f8:22:09:
                    a0:49:36:02:06:80:e1:4d:4a:22:45:1e:37:8f:29:
                    c2:a5:0d:f3:d8:f8:7f:f0:a4:71:bc:d3:c4:6e:4d:
                    ac:00:11:f8:a1:34:ad:8a:5f:c6:6c:f5:23:f8:f0:
                    05:c0:4e:17:c0:fd:c3:32:b5:57:e1:17:4d:21:0b:
                    9c:c1:e8:2b:b7:f2:3f:aa:26:95:32:2b:89:64:e0:
                    8d:09:0a:1e:95:23:e7:e7:d8:80:78:91:fe:3a:d8:
                    0e:bc:d0:58:f3:cf:70:9f:a6:71:63:49:9f:49:0b:
                    40:be:a9:e8:da:93:d7:87:88:06:94:77:a3:57:67:
                    b3:b9:6d:9f:8e:65:e7:1d:f5:23:71:61:b0:ff:a6:
                    74:f2:95:2b:2a:66:e8:f2:98:8e:d3:d8:d9:97:60:
                    a2:7e:f8:8a:56:dc:b9:0f:aa:2d:2f:fb:72:e8:3c:
                    ce:45:35:af:f2:7e:9c:31:fa:c3:63:90:68:7d:4b:
                    6e:23:53:04:78:45:f3:75:af:fd:cc:d2:5f:77:a4:
                    74:11:fb:3a:fd:28:5d:4c:82:ff:02:e9:cc:ff:93:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:03:EF:8E:34:EA:9D:79:FE:FF:B9:F9:81:35:15:1C:72:9F:76:75
            X509v3 Authority Key Identifier:
                keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:83:f3:cf:2f:d7:04:9a:bf:1d:bf:44:c0:6b:65:4e:88:27:
         c1:69:fa:4c:f9:76:93:b9:ad:4a:f6:b8:60:8a:3c:56:f2:2a:
         c3:56:3b:33:b8:ac:dc:73:90:24:74:3c:27:ec:6d:99:6a:a2:
         00:16:ba:d6:0b:da:e3:96:92:91:1c:bd:ae:9b:8e:82:4f:fb:
         db:b7:56:dc:11:15:59:e7:fb:8d:34:00:b9:79:13:f5:bf:72:
         65:eb:4e:ab:db:48:d5:c9:4e:a3:d5:97:ad:3e:0a:fd:72:76:
         b9:c9:fa:ca:c8:45:e9:d9:48:bc:16:7f:1a:4b:95:71:11:a3:
         ca:f6:d9:86:49:69:9c:62:99:c1:40:8c:07:8c:c3:a6:9e:f7:
         52:6a:1c:8f:4a:3e:e1:d5:31:16:e9:f1:ea:54:8e:2e:51:a5:
         80:d6:e7:8d:f9:3e:8a:2b:b8:0d:97:1e:07:35:17:8d:7d:cf:
         ef:17:05:4b:06:c9:26:24:25:a3:b6:8d:ed:c2:bd:63:c5:f0:
         cc:47:cf:fe:6a:e3:62:a7:51:1d:3e:8b:69:9e:1e:89:85:0d:
         cc:cc:bc:b7:73:af:6f:98:1e:c1:fd:0b:78:df:e5:93:f9:bb:
         d3:91:b4:ad:12:03:fd:53:06:5f:aa:e9:c1:a3:e2:67:95:3b:
         64:81:f5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:11:25 2026 by rpki-client